Leasys

Privacy

 

With reference to the new General Data Protection Regulation ("GDPR") in force since 25.05.2018 throughout the European Union, the following information is provided updated in accordance with the new regulation.

The data controller is Leasys Rent SpA (above the “Controller”), with registered office in Bolzano, Corso Italia 17.

As described in the following sections, your data will be processed for:

- the performance and management of the contractual relation;

- the promotional and marketing activities.

 

A) Performance and management of the contractual relation 

The data collected during the preliminary investigation, the signing of the contract and during the contractual relationship with Leasys Rent SpA will be processed for purposes strictly connected and required for the performance of the pre-contractual and / or contractual relationship, to protect the rights of the Data Controller as well as to comply with legal and regulatory obligations imposed by authorities legitimated by law, by Supervision bodies and Controlling bodies.  

In the preliminary phase Leasys Rent will proceed to verify your data through databases of the FCA Bank S.p.A. Group. with the specific purpose of preventing scams and insolvencies or other similar events.
In the event of a negative outcome of the analysis described above, it will not be possible to provide the requested rental service.

The data required for the purposes referred to in this point are necessary for the conclusion of the contract, and any refusal to supply them makes it impossible to carry out the activities needed for the conclusion and performance of the contract.

In addition, such data may be used for administrative and management purposes, such as reporting, control and/or internal audit activities, study activities for the development of new products, as well as for the management of complaints, claims and accidents, for activities aimed at improving products and/or services already distributed. The data collected will be processed for up to 10 (ten) years from the date of conclusion of the contract or for a shorter period based on the needs of the existing treatments.

The data collected is acquired by Leasys Rent SpA (the Data Controller) and by the Data Processors through:

▪      the websites managed by Leasys Rent SpA 

▪      phone calls made by customers directly to Leasys Rent SpA’s reservation department and/or assistance phone lines, from Leasys Rent SpA’s appointed Data Processing or from the international Leasys Rent circuit,

▪      the rental agreements issued in the Leasys Rent’s national and international circuits

▪      subscription forms for the Leasys Rent loyalty programs

▪      websites and booking software used by Italian and international travel agencies

▪      written statements and / or reports related to accidents and / or injuries connected with the rentals 

▪      communications from other companies linked to the Leasys Rent by commercial agreements

The access to the www.leasysrent.it website generates the creation of cookies, in this regard please refer to the "Cookie Policy" page available at the following link: https://www.leasysrent.it/en/customer-service/cookie/

The www.leasysrent.it website’s Privacy Policy can be consulted in full in the dedicated section: https://www.leasysrent.it/en/customer-service/privacy-policy/


B) Geolocation data processing

Leasys Rent S.p.A’s fleet’s vehicles are equipped with satellite anti-theft devices which can geolocalize the movement of the vehicle to verify successfully the vehicle tracking requests in the event of theft and/or misappropriation, to obtain useful elements for the reconstruction of any accident reported by the User and/or the counterparty insurance company, for the fulfillment of the related legal obligations, including those of a fiscal or accounting nature, and finally for the protection of any rights in court, as well as the fulfillment of legal obligations, regulations, European legislation, guidelines issued by the authorities and supervisory bodies. 

 

C) Promotion and marketing

Furthermore, following your consent, personal data will be processed for the following purposes:

1. To receive promotions regarding the various range of Leasys Rent products.

The processing includes traditional and unconventional marketing activities, telemarketing, commercial information, sending of advertising material or for market research, direct sales activities or interactive commercial communications about products, services and other activities of the Controller, and it refers to any product already activated at the time of subscription or activated at a later stage.
The transmission of data is optional and the lack of consent for such treatment prejudices the performance of the activities described above.
The customer has the right to revoke at any time the consent previously given with reference to the purposes referred to in this paragraph through the methods indicated under letter H).
The data collected will be retained for 24 (twenty-four) months after the conclusion of the contractual relationship and will be subsequently anonymized or eliminated.

2. To receive only promotions closest to your preferences and habits.

The processing includes the analysis of personal data collected in order to evaluate and predict certain personal aspects including performance at work, economic situation, health, personal preferences, interests, behaviour, location or movements, in order to limit promotional activities to only related products or promotions based on the analysis previously carried out.
The transmission of data is optional and the lack of consent for such treatment prejudices the performance of the activities described above.
The customer has the right to revoke at any time the consent previously given with reference to the purposes referred to in this paragraph through the methods indicated under letter H).
The data collected will be retained for 12 (twelve) months after the conclusion of the contractual relationship and will be subsequently anonymized or eliminated.

 

3. To receive commercial promotions regarding products and services offered by others companies

The processing includes the communication of personal data to partner companies of the Controller - including, as example and not limited to, third parties and / or other companies of the Leasys Group, of the FCA Bank and FCA group and of the Crédit Agricole Group, as well as to your car dealer or sales representative and / or manufacturer-  for purpose of traditional and unconventional marketing activities, telemarketing, commercial information, sending of advertising material or for market research, direct sales activities or interactive commercial communications about products, services and other activities of third parties.
The transmission of data is optional and the lack of consent for such treatment prejudices the performance of the activities described above.
The customer has the right to revoke at any time the consent previously given with reference to the purposes referred to in this paragraph through the methods indicated under letter H).


D) Type of data processed 

Leasys Rent SpA in the activity of car rental without driver, collects data relating to its customers for the purpose of completing the Rental Agreement:

1. name, surname, address, telephone and fax number, e-mail address, place and date of birth, driving license details, fiscal code.

2. name of the company for which the customer works, employee number and / or employee identification number.

3. information relating to possible memberships in companies, associations, loyalty programs for the purpose of applying the agreed rates.

4. information regarding the date and time of collection and return of the rental vehicle, flight number and the name of the used airline.

5. information relating to consumer surveys and/or regarding past and current solvency of the company for which the customer works.

6. information relating to accidents and / or injuries occurring during the rental (also regarding the data of any counterparties and / or others involved in various ways).

7. Data relating to the vehicle geolocation following an unlawful report concerning the rented vehicle


E) Recipients of the personal data

For the different purposes described above, in compliance with the rights and guarantees provided for by the current legislation, the Data Controller may communicate customer data to: 

• companies of the Leasys S.p.A. group, or in any case subsidiaries or associated companies;

• companies in the FCA Bank, FCA and Crédit Agricole group;

• car dealer or reference sales person, as affiliated with the Controller;

• supervisory and control authorities bodies and in general subjects, public or private, with important public enforcement functions; Tax Registry, Judicial Authority and police forces;

• insurance companies for the management of accident claims;

• entities who perform acquisition and data processing services necessary for the execution of the provitions received from customers;

• agencies operating in the automotive sector and public offices competent for the registration of vehicles;

• entities engaged in providing services for the management of the information system and telecommunications networks (including e-mail);

• entities engaged in the transmission, enveloping, transport and handling of communications with the involved;

• entities engaged in filling of documentation and data entry;

• entities engaged in customer assistance activities (eg: call centers, customer services, etc.);

• companies managing national and international systems for fraud control; studies or companies in the field of assistance and consultancy relationships;

• entities engaged in debt collection activities;

• entities engaged in activities of promotion and sale of products / services of the Data Controller;

• entities in charge of control, revision and certification of the company activities also for the interests of customers.

 

If necessary, the indicated entities will be appropriately appointed as Data Processors in accordance to the current legislation.


F) Data Processing Rules

The processing of data for each of the aforementioned purposes will be performed through automated and telematic means, and in particular, by ordinary or electronic mail, telephone (also through automated calls, SMS, MMS etc.), fax and any other IT channel (eg websites, mobile apps) and on paper.

 

G) Data Protection Officer

For any direct - formal and urgent contact, other than the rights provided for by paragraph H) – the customer can contact the Data Protection Officer through the following contact:

• Email: leasysrent-italia-dataprotectionofficer@fcagroup.com;

 

H) Rights of data subjects

In relation to the processing of personal data listed above the customer has the right at any time to request:

• the confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and to be informed of their contents and origin, the purposes of the processing,  meaningful information about the logic involved in case of processing by electronic means;

• the integration, updating, rectification,erasure, anonymisation of personal data that have been processed;

• to block or refuse the personal data processing;

• to receive the personal data concerning you in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller (so-called right to data portability);

• the attestation that the requested operatons  have been forwarded and communicated to each recipient to whom the personal data have been disclosed;

You are entitled to exercise your rights by contacting the Customer Care of Leasys Rent S.p.A. at the following email address: privacy@leasysrent.it;

The data controller shall reply to your request within 30 (thirty) days from receipt unless this period is extended by 60 (sixty) days, taking into account the complexity and number of requests; once the aforementioned terms have expired you have the right to make a complaint with the  Data Protection  Authority in the forms and methods provided for by the current legislation.